← Back to list
Job · Senior

Senior Security Engineer

Security Engineer • Senior • Hybrid • Full-time United States Boston, USA

You'll strengthen Later's company-wide security posture through hands-on engineering and pragmatic standards, focusing on application security, cloud/infrastructure security, and SOC 2 compliance, partnering closely with Engineering, IT, and business teams.

Responsibilities

  • Assess and continuously improve the overall security posture across applications, infrastructure, cloud, and business workflows
  • Define and implement scalable security standards and guardrails that support SOC 2 readiness
  • Translate SOC 2 and related compliance requirements into sustainable technical and operational controls
  • Build and maintain internal security tools, automation, and services
  • Design and implement security controls within CI/CD pipelines, including scanning, dependency, and secret management
  • Support application security efforts: secure design reviews, threat modeling, code review guidance, API security
  • Improve cloud infrastructure and corporate systems security through hardening, monitoring, and configuration review
  • Strengthen security observability and incident response readiness through logging, alerting, and detection engineering

Requirements

  • 5-7+ years of experience as a Security Engineer or Software Engineer with a strong security focus
  • Proven ability to build and operate production-quality software, automation, and internal tooling
  • Strong understanding of application security, infrastructure security, cloud security, and secure CI/CD practices
  • Hands-on experience with vulnerability management, secure software development, and threat modeling
  • Experience with security frameworks such as OWASP, NIST, CIS Controls, SOC 2, and ISO 27001
  • Experience supporting SOC 2 compliance through practical, automated, auditable controls
  • Familiarity with cloud security platforms such as AWS Security Hub, Azure Security Center, or GCP Security Command Center
  • Experience with SIEM/SOAR tools, logging and monitoring platforms
  • Experience with Infrastructure-as-Code security scanning for tools such as Terraform or CloudFormation
  • Ability to translate complex security concepts into clear guidance for technical and non-technical audiences
  • Familiarity with C#, modern backend systems, and cloud-native architecture

Soft skills

Driven by impactStrategic and customer-centric thinkingCurious and growth-orientedCollaborative and resilientAccountable and honestEmotionally intelligent

About the company

Later is the world's most intelligent influencer marketing company, combining real creator relationships, trusted intelligence, and an AI-powered platform; trusted by enterprise brands including Nike, Wayfair, Unilever, and Southwest Airlines.

Similar jobs